INFORMATION NOTICE REGARDING THE PROTECTION OF PERSONAL DATA
1. Purpose
This Personal Data Retention and Destruction Policy (“Policy”) has been prepared by GÜR-SAN İNŞ. MAK. SAN. LTD. ŞTİ. (“Company”) in its capacity as data controller, in order to fulfill our obligations under Law No. 6698 on the Protection of Personal Data (“Law”) and the Regulation on the Deletion, Destruction or Anonymization of Personal Data (“Regulation”), which constitutes the secondary legislation of the Law. The purpose of this Policy is to inform data subjects about the principles regarding the determination of the maximum retention period necessary for the purpose for which their personal data are processed, as well as the procedures for deletion, destruction, and anonymization.
2. Scope
This Policy covers the personal data of Company employees, employee candidates, suppliers, customers, visitors, and other third parties. It applies to all personal data processing activities carried out in all recording media owned or managed by the Company, where personal data is processed.
3. Processed Personal Data
| DATA CATEGORIES | CATEGORIES OF DATA SUBJECTS |
|---|---|
| Identity | Employee candidate, employee, intern, person receiving products or services, potential customer, visitor, supplier representative |
| Contact | Employee candidate, employee, intern, person receiving products or services, potential customer, visitor, supplier representative |
| Location | Employee candidate, employee, intern, person receiving products or services, potential customer, supplier representative |
| Personnel | Employee |
| Legal Transaction | Employee, person receiving products or services |
| Customer Transaction | Person receiving products or services |
| Physical Space Security | Employee candidate, employee, intern, person receiving products or services, visitor |
| Finance | Employee, intern, person receiving products or services, supplier representative |
| Professional Experience | Employee candidate, employee |
| Visual and Audio Records | Employee candidate, employee, intern, person receiving products or services, visitor |
| Health Information | Employee candidate, employee, intern |
| Criminal Conviction and Security Measures | Employee candidate, employee |
| Biometric Data | Employee |
4. Purposes of Processing Personal Data
Personal data are processed for the following purposes:
Management of emergency processes, Management of information security processes, Management of recruitment processes for employee candidates, Fulfillment of contractual and legal obligations for employees, Conduct of activities in compliance with legislation, Management of finance and accounting processes, Ensuring physical space security, Follow-up and management of legal affairs, Management of communication processes, Conduct of occupational health and safety activities, Management of logistics operations, Execution of purchasing processes, Management of after-sales support services, Execution of sales processes, Execution of production and operational processes, Management of customer relationship processes, Execution of contractual processes, Tracking of requests and complaints, Providing information to authorized persons, institutions, and organizations, Creation and follow-up of visitor records.
5. Method and Legal Basis for Collecting Personal Data
GÜR-SAN İNŞ. MAK. SAN. LTD. ŞTİ. may collect your personal data for the purposes stated above, through verbal, written, visual, or electronic means, and based on legal grounds arising from the Law No. 6698, applicable legislation, and contractual obligations.
6. Your Legal Rights Regarding Processed Personal Data
You have the following rights under Article 11 of the Law No. 6698:
- To learn whether your personal data is processed,
- To request information on whether your personal data has been processed,
- To learn the purpose of processing and whether your personal data is used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction if your personal data is incomplete or inaccurate, and to request that the correction be notified to third parties to whom the data has been transferred,
- To request deletion or destruction of personal data within the framework of the conditions stipulated in the Law, and to request that the action taken be notified to third parties to whom the data have been transferred,
- To object to the occurrence of a result against yourself through the analysis of processed data exclusively by automated systems,
- To request compensation for damages in case you suffer a loss due to the unlawful processing of your personal data.
In accordance with Article 11 of the Law, you may submit your written request regarding the use of your above-mentioned rights by sending it:
- To our address: Ahi Evran Mahallesi 225. Cadde No: 101 Sincan / ANKARA with a signature, or
- To our registered e-mail address: info@gur-san.com.tr, signed with a secure electronic signature.
